Privacy Policy

Respect for our visitors’ privacy is of the utmost importance to us; therefore, the amount and nature of the data collected during browsing have been kept to the minimum necessary, and all necessary measures have been taken to ensure their security.

Please note that this Privacy Policy applies only to the Website evohotel.it and not to any other websites that the User may visit through links on the aforementioned Website.

In accordance with the provisions of Italian Legislative Decree 196/2003, the Personal Data Protection Code, and the General Data Protection Regulation – EU Regulation 2016/679, RAGNACCI IVO E FIGLI S.N.C., represented for this purpose by its legal representative, in its capacity as Data Controller, wishes to inform you as follows.

Personal Data processed and purposes of processing

Data collected automatically

The information systems used to operate this Website acquire, during normal browsing, certain Personal Data whose transmission is inherent in the use of Internet communication protocols (IP addresses, domain names of the computers used by Users connecting to the Website, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server, etc.), as well as other parameters relating to the User’s operating system and IT environment.

These data are used solely to obtain anonymous statistical information on the use of the Website and to check that it is operating correctly. The data collected may be used to establish liability in the event of hypothetical computer crimes against the Website.

Data provided voluntarily by Users

Personal Data voluntarily provided by Users by completing contact forms or through any other forms of communication available on our Website are used to respond to the requests submitted and, with your consent, for all purposes that require it. For example, entering an email address in the contact form entails its collection, which is necessary to respond to the requests submitted, as well as the collection of any other Personal Data included in the message.

Your Personal Data may be disclosed, for the purposes indicated, to our collaborators who have been specifically authorized within the scope of their respective duties.

For the same purposes, where necessary, the data collected may be transferred outside Italy where the conditions required by applicable law are met.

Methods of processing and retention periods

Processing will be carried out on paper and by electronic means by the Data Controller and by authorized persons, in compliance with all precautionary measures necessary to ensure the security and confidentiality of the data. Your Personal Data provided to us through forms and contact forms will be retained for the period necessary to respond to your requests, as set out in the retention policy for the various purposes.

Optional provision of Personal Data

Apart from the required browsing data that are recorded automatically, the User is free to provide the Personal Data (for example, first name, last name, address, email, …) requested in the forms available on the Website. Failure to provide such data may make it impossible to obtain what has been requested.

Disclosure of the data collected

For the purposes described above, your Personal Data will be made available to the Data Controller’s employees, equivalent personnel and collaborators, who will act as persons authorized to process Personal Data.

Moreover, your Personal Data will be disclosed to and processed by third parties belonging to the following categories:

  1. Service providers engaged by the Data Controller to manage the Website;
  2. Companies that manage the Data Controller’s IT system;
  3. Companies and consultants providing legal and/or tax advisory services;
  4. Supervisory and regulatory authorities and, in general, public or private entities carrying out functions of public interest.

The parties belonging to the categories listed above operate, in some cases, independently as separate Data Controllers and, in other cases, as Data Processors specifically appointed by the Data Controller in accordance with Article 28 of the GDPR.

The complete and updated list of the parties to whom your Personal Data may be disclosed may be requested at the Data Controller’s registered office info@evohotel.it

Data Subjects’ rights

With regard to the processing activities described in this Privacy Policy, as a Data Subject you may, subject to the conditions laid down by the GDPR, exercise the rights set out in Articles 15 to 21 of the GDPR and, in particular, the following rights:

  • Right of access – Article 15 GDPR: the right to obtain confirmation as to whether or not Personal Data concerning you are being processed and, where that is the case, to obtain access to your Personal Data – including a copy thereof – and to receive, among other things, the following information:
    • Purposes of the processing;
    • Categories of Personal Data processed;
    • Recipients to whom the data have been or will be disclosed;
    • Data retention period or the criteria used to determine it;
    • Data Subject’s rights (rectification, erasure of Personal Data, restriction of processing and the right to object to processing;
    • Right to lodge a complaint;
    • Right to receive information on the source of my Personal Data where they were not collected from the Data Subject;
    • The existence of automated decision-making, including profiling.
  • Right to rectification – Article 16 GDPR: the right to obtain, without undue delay, the rectification of inaccurate Personal Data concerning you and/or the completion of incomplete Personal Data;
  • Right to erasure (right to be forgotten) – Article 17 GDPR: the right to obtain, without undue delay, the erasure of Personal Data concerning you where:
    • The data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
    • You have withdrawn your consent and there is no other legal ground for the processing;
    • You have successfully objected to the processing of Personal Data;
    • The data have been unlawfully processed;
    • The data must be erased in order to comply with a legal obligation;
    • The Personal Data have been collected in relation to the offer of information society services referred to in Article 8(1) of the GDPR.
  • The right to erasure shall not apply to the extent that processing is necessary for compliance with a legal obligation, for the performance of a task carried out in the public interest, or for the establishment, exercise or defence of legal claims.
  • Right to restriction of processing – Article 18 GDPR: the right to obtain restriction of processing where:
    • The Data Subject contests the accuracy of the Personal Data;
    • The processing is unlawful and the Data Subject opposes the erasure of the Personal Data and requests the restriction of their use instead;
    • Although the Data Controller no longer needs the Personal Data for the purposes of the processing, they are required by the Data Subject for the establishment, exercise or defence of legal claims;
    • The Data Subject has objected to the processing, as indicated below, pending verification as to whether the legitimate grounds of the Data Controller override those of the Data Subject;
  • Right to data portability – Article 20 GDPR: the right to receive the Personal Data concerning you that you have provided to the Data Controller in a structured, commonly used and machine-readable format, and the right to transmit those data to another controller without hindrance, where the processing is based on consent and is carried out by automated means. You also have the right to have your Personal Data transmitted directly from the Data Controller to another controller where technically feasible;
  • Right to object – Article 21 GDPR: the right to object, at any time, to the processing of Personal Data concerning you based on the legal ground of legitimate interest, including profiling, unless the Data Controller demonstrates compelling legitimate grounds for continuing the processing which override the interests, rights and freedoms of the Data Subject, or for the establishment, exercise or defence of legal claims.
  • Lodge a complaint with the Italian Data Protection Authority, Piazza di Montecitorio no. 121, 00186 Rome (RM).

The rights set out above may be exercised against the Data Controller by using the contact details provided in the “Data Controller and Data Processors” paragraph. The Data Controller will take charge of your request and provide you, without undue delay and in any event no later than one month from receipt of the request, with information on the action taken in response to it.

Exercising your rights as a Data Subject is free of charge pursuant to Article 12 GDPR. However, where requests are manifestly unfounded or excessive, in particular because of their repetitive nature, the Data Controller may charge a reasonable fee taking into account the administrative costs of handling your request, or refuse to act on the request.

Finally, please note that the Data Controller may request additional information necessary to confirm the identity of the Data Subject.

Data Controller and Data Processors

The Data Controller and Data Processor is RAGNACCI IVO E FIGLI S.N.C. in the person of its legal representative pro tempore.

For any information concerning the processing of your Personal Data through this Website, you may contact RAGNACCI IVO E FIGLI S.N.C. at the email address info@evohotel.it

Cookie Policy

This Website uses so-called “cookies”, small text files that are stored on the User’s computer and are used to make our Website easier to use, more effective and secure. The cookies used are “session cookies”, which are not stored persistently on the User’s computer and disappear when the browser is closed.